Privacy Policy

1Controller

The controller responsible for data processing on this website is:

Full details in the Legal Notice.

2Principles & legal bases

We process personal data only to the extent necessary and on the basis of the GDPR. The legal bases we rely on are, in particular: your consent (Art. 6(1)(a)), the performance of a contract or pre-contractual measures (lit. b), and our legitimate interests in a secure, functioning service (lit. f).

3Hosting

This website is hosted by Netlify (Netlify, Inc., USA). The provider processes, on our behalf, data that arises when the website is accessed (see server log files). The legal basis is our legitimate interest in a secure and efficient presentation (Art. 6(1)(f)). A data processing agreement (DPA) is in place with the provider. As the provider is based in the USA, data may be processed outside the EU/EEA; appropriate safeguards apply (EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework).

4Server log files

When the website is accessed, information transmitted by your browser is collected automatically — including IP address, date and time of access, the page requested, referrer, browser type and operating system. This data is used for technical delivery, stability and security and is deleted after a limited period for security purposes. Legal basis: Art. 6(1)(f).

5Cookies & consent

The website currently sets only strictly necessary cookies. As soon as consent-requiring cookies or tracking (e.g. affiliate, analytics) are used, we obtain your consent in advance via a consent tool. Legal basis for consent-requiring services: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future.

6Waitlist / early-access sign-up (MailerLite)

If you join the waitlist, we process your email address in order to notify you about the launch or your early-access wave. Sending and management are handled by the service provider UAB MailerLite, Vilnius, Lithuania (EU) as a processor; a data processing agreement is in place.

• Legal basis: your consent, Art. 6(1)(a) GDPR.
• Confirmation via double opt-in — the sign-up becomes active only after you click the confirmation link.
• Withdrawal at any time via the unsubscribe link in every email or by contacting us; withdrawal does not affect the lawfulness of processing carried out beforehand.
• Retention: until you withdraw or the purpose no longer applies.

MailerLite is based in the EU. Where sub-processors outside the EU/EEA are involved, appropriate safeguards (e.g. EU Standard Contractual Clauses) apply — see MailerLite's data processing agreement.

7Your rights

You have the following rights regarding your personal data:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17)
• Restriction of processing (Art. 18) and data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of a given consent with effect for the future (Art. 7(3))

To exercise these rights, a message to contact@coteindex.com is sufficient.

8Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your residence or of the alleged infringement. Competent authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI).

Last updated: July 2026